Monday 27 July 2026 00:15:49 GMT+02:00
Netcrook
#procurement phishing
Procurement Emails Became the Bait in a Session-Theft Campaign Against Microsoft 365
AiTM phishing can turn a routine vendor request into a live browser hijack, letting attackers reuse an authenticated Microsoft 365 session even after MFA is completed.
Drone Supply Chains Became the Message: A Bespoke Lure Campaign Tests Ukraine's Trust Layer
A reported campaign using Besomar-themed decoys shows how defense procurement workflows can be turned into an entry point, even when the payload chain is still only partly visible.
Fake Purchase Orders, Real Risk: A Scripted Backdoor Lands in Business Inboxes
A procurement-themed lure and a JavaScript payload are being used to probe US enterprises, with the malware described as a backdoor that seeks persistent access.